When a site stops resolving or email starts bouncing, the first question is usually “what does DNS actually say?” This DNS lookup tool answers in seconds: enter any domain, pick a record type, and see live records from Cloudflare’s encrypted DNS-over-HTTPS resolver. It supports A, AAAA, MX, CNAME, TXT, NS, and SOA records and shows each record’s TTL.
How to Use
- Enter a domain: Type a name like
example.com; invalid formats are caught early - Choose a record type: Select A, AAAA, MX, CNAME, TXT, NS, or SOA
- Run the lookup: Results come from Cloudflare’s DoH resolver over encrypted HTTPS
- Read the results: Each record shows its value and TTL in seconds
Features
- Seven record types: A, AAAA, MX, CNAME, TXT, NS, and SOA
- Encrypted queries via Cloudflare DNS-over-HTTPS
- Domain validation with clear error messages
- TTL displayed for every record
- No command line needed — everything runs in the browser
Understanding DNS Record Types
Each record type answers a different question. A records map a domain to an IPv4 address and AAAA records do the same for IPv6. CNAME records alias one name to another, and MX records direct email, with priority numbers deciding which server is tried first. TXT records carry verification data like SPF rules and DKIM keys, while NS and SOA identify the zone’s name servers and metadata. After editing a record, remember that resolvers cache answers for the TTL’s duration — which is why changes can take hours to appear everywhere.
Use Cases
- Deployment checks: Confirm an A or CNAME record after moving hosts
- Email setup: Verify MX, SPF, and DKIM records when mail misbehaves
- Propagation checks: See whether a recent change has reached public resolvers
- Domain audits: Review NS and SOA records during transfers or troubleshooting
Related Tools
Frequently Asked Questions
What DNS service does this tool use?
This tool uses Cloudflare's DNS-over-HTTPS (DoH) service at cloudflare-dns.com. All queries are encrypted with HTTPS, ensuring your DNS lookups are private and cannot be intercepted or modified in transit.
What does TTL mean in DNS records?
TTL (Time To Live) is the duration in seconds that a DNS record may be cached by resolvers before they must query again. A lower TTL means changes propagate faster, while a higher TTL reduces DNS query load but delays propagation of updates.
Why am I getting empty results for some record types?
Empty results mean that the domain does not have records of that type configured. This is normal for many record types. For example, not all domains have AAAA (IPv6) records, and TXT records are only present if explicitly configured for SPF, DKIM, or verification purposes.